I'm limiting what is run by tag, see to command above.  I could tag the command that creates the directory as well I suppose, but wanted this touch little in the roles and safely run locally.